Questions tagged [bind]

BIND is the de facto standard DNS server

Filter by
Sorted by
Tagged with
4
votes
1answer
6k views

Configure BIND as Forwarder only (no root hints), encrypted + RPZ blacklist / whitelist all together

My setup is getting more complex, generally I tend to divide things in pieces and assemble them together by myself. But it seems this time I need more help to get the whole gears working together. ...
1
vote
2answers
4k views

resolving DNS via Tor

When I am using Tor, and not using the Tor bundle there is a possibility of DNS leaks in certain situations. What can be done to minimize it? Is it possible to resolve DNS via Tor?
4
votes
1answer
4k views

Large zone file for bind9 : ad-blocking

I was successfully using a small (20,000 entries) zone file with bind9 server, but today my data provider sent an update which caused the zone file to become 300,000+ entries large (30Mb+). The ...
18
votes
1answer
26k views

How to let `named` (bind9) forward certain domains to a different nameserver?

In dnsmasq, it's possible to forward domains to different nameservers. How can I do that in named? server=/foo.com/10.0.10.1 server=/vpn.foo.com/8.8.8.8
3
votes
1answer
3k views

DNS query response logging

I have configured a CC TLD with bind9. I have successfully configured query logging also. But I can not do logging of query responses. Please have a look of what I have configured for query logging: ...
3
votes
1answer
3k views

can't generate key via dnssec-keygen

$ dnssec-keygen -a HMAC-MD5 -b 512 -n HOST {host} above results in blank line and endless waiting $ dnssec-keygen -T DNSKEY -a HMAC-MD5 -b 512 -n HOST {host} the same entropy: $ cat /proc/...
0
votes
1answer
191 views

Is there a way to bind a key to a control-sequence in bash?

In my .bashrc file I'm trying to bind a custom escape-sequence key to a control-sequence. What I have is: bind -x '"\eJD0C": "^C"' And it does not execute the shell control-sequence ^C which ...
0
votes
1answer
163 views

Bind RPZ config with domains of various levels

I use RPZ to blacklist some domains and my configuration looks like: *.com A 127.0.0.1 mydomain.net A 127.0.0.1 if i query a whatever domain .com it works correctly giving me 127.0.0.1 let's ...
0
votes
1answer
846 views

Bind not working as expected. Possible misconfiguration

I have two Raspberry Pis with me - one works as a media player, another as a home server (I call it plug). In the plug I have installed a couple of applications that has web interfaces - SickBeard (...
2
votes
1answer
551 views

How to bind mount from a symlink

This is similar like How do I do a bind mount over a symlink? But here the question is how to do a mount --bind from a symlink? I have /linux-4.13.0 and a symlink linux pointing to that: /linux -> /...
2
votes
1answer
745 views

Named serial increment SED oneliner

I need to increment named serial and I want to do it with sed. I've done it like this: echo 2015092315 | gsed s/20[0-9][0-9][0-9][0-9]*/`date +%Y%m%d%H`/g But then I realized that updates to zone ...
1
vote
1answer
433 views

BIND Reverse DNS Ignoring out-of-zone data

I have a simple, single-address reverse DNS PTR for 10.142.0.2 to gbox.example.com record set up like so: # cat /var/named/zones/0.142.10.in-addr.arpa.db $ORIGIN . $TTL 1D 0.142.10.in-addr.arpa. IN ...
0
votes
1answer
132 views

tcsh bindkey to turn on readline variable `visible-stats`

In .inputrc I store readline commands for bash, for example: bind "\C-S": i-search-fwd I do the same in .bindings for tcsh: bindkey "^S" i-search-fwd To specify readline variables in .inputrc I do:...